ELLIPTIC CURVES WITH MAXIMAL GALOIS ACTION ON THEIR 
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Abstract. Given an elliptic curve E over a number field k, the Galois action on the torsion points 
of E induces a Galois representation, pE'- Gal(fc/fc) — > GL2(Z). For a fixed number field k, we 
describe the image of pE for a "random" elliptic curve E over k. In particular, if k 7^ Q is linearly 
disjoint from the cyclotomic extension of Q, then pE will be surjective for "most" elliptic curves 
over k. 

1. Introduction 

Let E be an elliptic curve denned over a number field k. For each positive integer m, let E[m] be 
the group of m-torsion points in E(k). The group E[m] is isomorphic to (Z/mZ) 2 and is acted on 
by the absolute Galois group Gk '■= Gal(k/k). This action may be expressed in terms of a Galois 
representation, 

PE,m- G k -> Aut(£[m]) GL 2 (Z/mZ). 
Taking the inverse limit over all m (ordered by divisibility), we have a Galois representation 

PE : G k -> Aut(£(£) tors ) * GL 2 (Z). 

In this paper, we will describe how large the image of pe is for a "random" elliptic curve over k. 

A renowned theorem of Serre ([Ser72, Theoreme 3]) says that if E does not have complex 
multiplication, then pE(Gk) has finite index in GL2(Z). In the same paper, Serre shows that 
Pe{Gq) 7^ GL 2 (Z) for every elliptic curve E over Q. 

The first example of a surjective pe was given in the doctoral thesis of A. Greicius [Gre07]. Let 
a G Q be a root of the polynomial x 3 + x + 1, and let E/Q(a) be the elliptic curve given by the 
Weierstrass equation y 2 +2xy+oty = x 3 — x 2 . In [Gre07, §3.3], it is shown that P_e(Gq( q )) = GL2(Z). 

1.1. Statement of results. Denote the ring of integers of k by Ok- For (a, b) G 0?, define 
^a,6 = — 16(4a 3 + 27b 2 ). If A a; 6 7^ 0, then let E(a,b) be the elliptic curve over k defined by the 
Weierstrass equation 

Y 2 = X 3 + aX + 6. 

Fix a norm ||-|| on M. ®% 0\ = R 2 I fe: ^. For each real number x > 0, define the set 

B*(z) = {(a,b) G O, 2 : A a , fe + 0, ||(a,6)|| < x}. 
Thus to each pair (a, b) G Bk(x), we can associate an elliptic curve E(a,b) over fc. Note that 
(1.1) \B k {x)\ ~ ra 2 [ fcQ ' 

as x — > co, where k > is a constant which depends on and ||-||. 
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The following theorem addresses a question of Greicius on the surjectivity of the pe ([Gre07, §3.4 
Problem 3]). Let Q cyc C k be the cyclotomic extension of Q. 

Theorem 1.1. Suppose that k n Q cyc =Q and k / Q. Then 

\{(a,b) G B k {x) : p E{a , b) (G k ) = GL 2 (Z)}| 
lim j = 1. 

x -*°° \ B k{x)\ 

Intuitively, the theorem says that for a randomly chosen pair (a, b) G Oi, the corresponding 
elliptic curve E(a,b) satisfies p E (a,b)(Gk) = GL 2 (Z). 

Let Xk '■ Gk ~ > ^ x be the cyclotomic character of k. For each elliptic curve E over k, we have 
deto/?E = Xk- I n particular, the assumption n Q cyc = Q (equivalently Xk{Gk) = ^ x ) is necessary 
for Theorem 1.1. For a number field k, define the group 

H k := {A G GL 2 (Z) : det(A) G Xfc (G fc )}. 

Given an elliptic curve E over fc, we certainly have pE{G k ) Q Hk- Our main theorem, which 
generalizes Theorem 1.1, shows that this is the only general constraint for k ^ Q. 

Theorem 1.2. Let k ^ Q be a number field. Then 

\{{a,b) G B k {x) : p E (a,b)(Gk) + H k }\ log a; 

Remark 1.3. Theorem 1.2 shows that the proportion of (a, b) in Bk(x) with PE(a,b){Gk) = -^fc> as a 
function of x, quickly approaches 1. The implicit constant in the theorem is effective and depends 
only on k and the fixed norm. 

Before continuing, let us introduce some more notation. Let E be an elliptic curve over a field 
k. For each positive integer m, denote the fixed field in k of ker(pE,m) by k(E[m]). 

1.2. The rationals. For completeness, we now discuss the case k = Q which was excluded from 
Theorem 1.2. Let E be an elliptic curve over Q, and let A be the discriminant of some Weierstrass 
model of E over Q. There exists an integer n > 1 such that Q(\/A) C Q(p n ), where p n is the set 
of n-th roots of unity (the assumption k = Q is important here!). 

Using that the field Q(yfK) lies in both Q(E[2}) and Q(/i n ) C Q(E[n]), Serre deduced that the 
index [GL2(Z/2nZ) : pe,2u{Gq)] is even (for details, see [Ser72, pp. 310-311]) and in particular 
Pe(Gq) 7^ GL 2 (Z). Following Lang and Trotter, we make the following definition. 

Definition 1.4. An elliptic curve E over Q is a Serre curve if [GL 2 (Z) : Pe(Gq)] = 2. 

A Serre curve is thus an elliptic curve E over Q for which pe(Gq) is as large as possible. For a 
Serre curve E/Q, the group pe(Gq) can be described explicitly in terms of the field Q(y/~A). 

N. Jones [Jon06a] (building on work of Duke [Duk97]) has shown that "most" elliptic curves over 
Q are Serre curves. The analogue of Theorem 1.2 is then the following. 

Theorem 1.5 (Jones). There is a constant (3 > such that 

\{(a,b) G Bq(x) : E(a,b) is not a Serre curve}\ (logx) 13 
\B^j\ << l-l 

Remark 1.6. Theorem 1.5 is a special case of [Jon06a, Theorem 4] and will be proven in §7.2. Unlike 
Jones' version, the constants in our proof will be effective. 
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1.3. Overview of proof. Suppose that E is an elliptic curve over a number field k 7^ Q. There is 
an exact sequence 

1 -» SL 2 (Z) -► GL 2 (Z) ^ Z x -► 1, 
and the representation detopg: — ► Z x is the cyclotomic character \k of k. Therefore, 

p E (G k )nSL 2 (Z)=p E (G k cy C ). 

Thus the equality pE(Gk) = Hk is equivalent to /Oe(GWc) = SL2(Z). A group theoretic argument 
will show that this in turn is equivalent to having /9E,m (GWc) = SL2(Z/mZ) whenever m is equal 
to 4, 9, or a prime > 5. 

For a prime m = i > 5, the condition pE,i(Gk c y) = SL2(Z/^Z) is equivalent to pE,i(Gk) 2 
SL2(Z/^Z). By considering the Frobenius endomorphism for the reduction of E modulo several 
primes p C fc , we can determine which conjugacy classes of GL2(Z/£Z) meet pE,i(Gk)- Combining 
this modulo p information together, we will use the large sieve to give an asymptotic upper bound 
for the growth of 

\{(a,b) £ B k {x) : p E{am {G k ) 2 SL 2 (Z/£Z)}| 

as a function of x; see §5. To understand the distribution of reductions modulo p, we will use a 
recent result of Jones; see §3. Of significant importance is a theorem of Masser and Wiistholz, 
which is needed to bound the number of €s that must be considered. 

The conditions at m = 4 or 9 are more involved. In particular, for m = 4 we will need to 
impose the condition that yA is not in the cyclotomic extension of k (this avoids the obstruction 
of §1.2 that always occurs for k = Q). In §6, we again use the large sieve to bound the number of 
(a, b) £ Bk(x) for which y^A^ (and y/A a ,b if ^3 Q k) lie in the cyclotomic extension of k. 

Our main theorems will then be deduced in §7. 

Acknowledgments. Many thanks to Bjorn Poonen for his careful reading of this paper and helpful 
comments. Thanks also to Aaron Greicius and Nathan Jones. 

Notation and conventions. For each field k, let k be an algebraic closure of k and let Gk ■= 

Gal(Ayfc) be the absolute Galois group of k. For each integer n > 1, let p n be the group of n-th 
roots of unity in k. Let k cyc (resp. fc ab ) be the cyclotomic (resp. maximal abelian) extension of k 
in k. 

For a number field k, denote its ring of integers by Ok- Let be the set of non-zero prime 
ideals of Ok- For each p £ we have a residue field F p = O^/p; let N(p) be its cardinality. Let 
T,k(x) be the set of primes p in with N(p) < x. Let ord p : k x — > Z be the surjective discrete 
valuation corresponding to p. Denote the absolute discriminant of k by dk- 

Fix a group G. Let G' be the derived subgroup of G, i.e., the minimal normal subgroup of G for 
which G/G' is abelian. Equivalently, G' is the group generated by the set {xyx~ l y~ l : x,y £ G}. 
The abelianization of G is G ab := G/G'. Profinite groups will always be considered with their 
profinite topologies. 

For a, b in a field k, define A ajb = -16(4a 3 + 27b 2 ). If A a6 / 0, then let E(a,b) be the elliptic 
curve over k defined by the Weierstrass equation Y 2 = A 3 + aX + b. 

Suppose that / and g are real valued functions of a real variable x. By / < j (or p > /), 
we mean that there are positive constants C\ and C2 such that for all x > Ci, < C 2 |<?(x)|. 

We use 0(f) to represent an unspecified function g with g <C /. The dependencies of the implied 
constants will always be indicated by subscripts. Also, all implicit constants occurring in this paper 
are effective. 

Finally, the symbols i and p will always denote rational primes. 
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2. Criterion for maximal Galois action 



Proposition 2.1. Let E be an elliptic curve over a number field k, and let A be the discriminant 
of a Weierstrass model of E over k. Suppose that the following conditions hold: 



(i) The image of A in k x /(k x ) 12 depends only on the isomorphism class of E/k. Thus for a 
positive integer r dividing 12, the r-th root of A, up to a factor in p, r ■ k x , is independent 
of all choices. In particular, conditions (c) and (d) are well-defined. 

(ii) The Kronecker- Weber theorem says that Q cyc = Q ab , so condition (c) never holds for k = Q. 

Since deto^ : G k — ► Z x is the cyclotomic character of k, we find that pE(Gk) = H k if and only 
if p E {G k c Y c) = SL 2 (Z). Applying Lemma A. 7 to p E (G k c Y c), we have p E {G k ) = H k if and only if 
PE,m(Gfccyc) = SL 2 (Z/mZ) holds whenever m is 4, 9, or a prime > 5. Proposition 2.1 is then an 
immediate consequence of the following lemma. 

Lemma 2.3. Let E be an elliptic curve over a number field k with discriminant A G k x /(k x ) 12 . 
(i) Let I > 5 be a prime. If p E/ (G k ) D SL 2 (Z/£Z), then p E ,t{ G k^) = SL 2 (Z/£Z). 
(h) If PEA{G k ) 5 SL 2 (Z/4Z) and VA~ £ k cyc , then p E , 4 {G k ^c) = SL 2 (Z/4Z). 

(iii) If p E . 9 {G k ) D SL 2 (Z/9Z) and v 7 ^ k cyc , then p E ,<z{G k w) = SL 2 (Z/9Z). 

(iv) Ifp E [ 9 (G k ) D SL 2 (Z/9Z) and p 3 £ k, then p Ey9 {G k c yc ) = SL 2 (Z/9Z). 

Proof. Let m be a positive integer such that p E ,m{G k ) 2 SL 2 (Z/mZ). Since k cyc is an abelian 
extension of k, we have inclusions 

(2.1) SL 2 (Z/mZ)' C p E ,m(G k y C p B , m (G fc c yc ) C SL 2 (Z/mZ). 

(i) Suppose that m = i > 5 is prime. By Lemma A.l we have SL 2 (Z/^Z)' = SL 2 (Z/£Z), so from 

(2.1) we deduce that p E> e(G k cyc) = SL 2 (Z/£Z). 

(ii) Our assumption p E ^{G k ) 2 SL 2 (Z/4Z) implies that pEi^Gu^) = SL 2 (Z/4Z). Thus to prove 
pE,4(G k cyc) = SL 2 (Z/4Z), it suffices to show that k(E[4]) Hk cyc = k{p A ). 

In [LT76, Part III §11], it is shown that \YA~ is an element of k{E[A]). Using \TK k(pi), one 
finds that k{p 4 , C fc(£[4]) is an abelian extension of k(p^) of degree 4. By Lemma A.l the 
group SL 2 (Z/4Z) ab is cyclic of order 4, so k(E[4}) n /c(M4) ab = fc(^4, Therefore 

(2.2) k(E[4\) n k cyc = (k(E[4\) n A;(/i 4 ) ab ) n k cyc = k(ja, <TK) n k cyc = fc(/i 4 ), 
where the last equality uses \/A /c cyc . 

(iii) The assumption pE,9(G k ) 2 SL 2 (Z/9Z) implies that p E $(G k u 9 \) = SL 2 (Z/9Z). By Lemma A.l, 
the group SL 2 (Z/9Z) ab has order 3. 



Note that \/A is an element of k(E[3]) (see [AdeOl, Proposition 5.4.3] for example). Arguing 
as m part (ii), we find that k(E[9]) n A;(^ 9 ) ab = k(p 9 , \YA). Since v^A k cyc , we deduce that 
k(E[9}) n k cyc = k(p 9 ), and hence p E , 9 (G k cyo) = SL 2 (Z/9Z). 

(iv) The assumptions imply that p E ${G k ) = GL 2 (Z/3Z). One readily checks that GL 2 (Z/3Z)' = 
SL 2 (Z/3Z), and thus p E , 3 (G k )' = SL 2 (Z/3Z). Using (2.1), with m = 3, gives p El3 (G k cyc) = 
SL 2 (Z/3Z). 




Then p E {G k ) = H k . 



Remark 2.2. 
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By Lemma A.l, the group SL 2 (Z/9Z) ab has order 3. So from (2.1), with m = 9, we find that 
pE,9(G k cyc) is either SL 2 (Z/9Z)' or SL 2 (Z/9Z). If p£, 9 (GWc) = SL 2 (Z/9Z)', then Lemma A.l 
implies that pE,3{Gk c y c ) ^ SL 2 (Z/3Z). Therefore, PE$(Gk c y c ) = SL 2 (Z/9Z). □ 

We now state a criterion that applies to k = Q. 

Lemma 2.4 (Jones). Xei £7 fee an elliptic curve over Q which satisfies the following properties: 

(a) Pe e(Gq) 5 SL 2 (Z/£Z) /or every prime i > 5, 

(b) PeMGq) 2 SL 2 (Z/72Z). 
T/ien E is a Serre curve. 

Proof. For each m > 1, we have PE,m{Go) = GL 2 (Z/mZ) if and only if pE,m{GQ) 2 SL 2 (Z/mZ). 
The lemma is now a special case of [Jon06a, Lemma 5]. □ 

3. Elliptic curve over finite fields 

Fix a positive integer m and a prime p \ m. Let E be an elliptic curve over the field F p . As 
before, one has a Galois representation pE,m'- Gal(F p /F p ) — > GL 2 (Z/mZ), which arises from the 
Galois action on the m-torsion of E. 

Let Frobp G Gal(F p /F p ) be the p-th. power Frobenius automorphism. For a subset C of GL 2 (Z/mZ) 
stable under conjugation, define the set 

n c (p) := {(r,s) G ¥ 2 p : A r , s / 0, p E{r ^ m ^o\) G C}. 

The following theorem gives a good estimate on the cardinality of this set. 

Theorem 3.1 (Jones). Fix a positive integer m and a conjugacy class C o/GL 2 (Z/mZ). Let d be 
the element of (Z/mZ) x such that det(C) = {d}. Then for all primes p with p = d mod m, 

\Vc(p)\ _ \C\ +0 ( m5 \ 



p 2 |SL 2 (Z/mZ)| yp 1 / 2 ]' 

Proof. This follows from Theorem 8 (and Theorem 7) of [Jon06a]. A key ingredient is a general- 
ization of results of Hurwitz, see [Jon06b]. □ 

4. The large sieve 

Let K be a number field, A a free O^-module of rank n, and ||-|| a norm on Ar = ]R (g>^ A. Fix a 
subset Y of A. Let x > 1 and Q > be real numbers. For every prime ideal p G T,k, let Wp be a 
real number in the interval [0, 1). Assume the following conditions hold: 

(1) The set Y is contained in a ball of radius x; i.e., there is an ao G Ar such that \\a — ao\\ < x 
for all a G Y. 

(2) For every p G S^(Q), the image Y p of F in A/pA by reduction modulo p satisfies 

|Y P | < (l-w p )|A/pA|. 
Theorem 4.1 (Large sieve, [Ser97, §12.1]). With assumptions as above, we have 

x [K:Q]n + Q2n 

\y\ «*,a,h — 7^ — 

w/iere 

£ w)= e n T _ 

aCOxsquarefree p\a 
N(a)<Q 

Remark 4.2. We will apply the large sieve with A = 0| and ||-|| our fixed norm on M<g>z 0%. In §5 
and §6, we will take K to be k and Q, respectively. 
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5. Most elliptic curves have large ^-adic Galois images 
Throughout this section, fix a number field k. 
Definition 5.1. For each positive integer m, define the set 

B k , m {x) := {(a,b) G B k {x) : p E (a,b),m(Gk) 2 SL 2 (Z/mZ)}. 
The main goal of this section is to prove the following bound. 
Proposition 5.2. There is an absolute constant > 1 such that 

\B kA (x) U B kj9 (x) U |J £ > 5 B ktt (x)\ {logx)? 

\B k (x)\ <<fc ' IMI x [ fc: «/ 2 ' 

Remark 5.3. For an elliptic curve E over /c, we have Galois representations Pe,i°° '■ G k — > GLi^>t) 
coming from the action on the ^-power torsion. Proposition 5.2 (with Lemma A. 2) shows that 
for a "random" elliptic curve E over k, we have PE,e°°(G k ) 5 SL2(2^) for all primes t. Since 
detop E £cx> : G k — > is the £-adic cyclotomic character of k, we find that pE,i°°{G k ) is as "large 
as possible" for all L 

Remark 5.4. Our proof of Proposition 5.2 is clearly based on Duke's paper [Duk97], which proves 
the k = Q case (with Jones [JonOGa] handling 4 and 9). 

Unlike Duke's result, the implicit constants in Proposition 5.2 are effective. The source of non- 
effective constants in [Duk97] is the use of the Siegel-Walfisz theorem. We avoid this by applying 
the pigeonhole principle in the proof of Lemma 5.10 and then sieving only by conjugacy classes 
with a fixed determinant. 

5.1. Sieving elliptic curves by Frobenius conjugacy classes. For a positive integer m and a 
conjugacy class C of GL2(Z/mZ), define the set 

Y c {x) := {(a, b) G B k (x) : p E (a,b), m ( G k) n C = 0}. 

For d G (Z/mZ) x , let S|(Q; d,m) be the set of p G Sfc(Q) with degree 1 (i.e., N(p) prime) and 
N(p) = d mod m. 

Proposition 5.5. Let m be a positive integer and C a conjugacy class o/GL2(Z/mZ). Let d be 
the unique element of (TLjmTl})^ such that det(C) = {d}, and assume that d G Xk(G k ) mod m C 
(Z/mZ) x . Then 

ill «'■'■" (ra |El,I " : "" ;J ' m)l + °^ M/1 >)~' 

Proof. Let A be the O^-module 0\. We have already chosen a norm ||-|| on Ar := K (8>z O?, and 
the set -Bfc(x) C Ak lies in a ball of radius x. Let Q := x ^ k:Q ^ 2 . 
For each p G Y,\(Q]d, m), define 

(Frobjvd,)) G C} 

and = |fip|/iV(p) 2 . Let Yp be the image of Yq{x) in Fp via reduction modulo p. 

Suppose that (a, b) G B k (x) satisfies (a, 6) mod p G f2 p ; then .E(a, 6) has good reduction at p and 
P£(a,6),m(Frobp) C C. So PE( a ,b),m(G k ) fl C ^ 0, and thus (a, 6) ^ Yb(^)- This shows that 



Fp C F 2 - Op, 



and hence |Y p | < (1 - w p )|A/pA|. 



For p ^ Sl(Q;d, m), define ujp = 0. By the large sieve (Theorem 4.1) 

x 2[k:Q] 

(5-1) \Y c (x)\ —- , 

where 

£ II tV E ■ 

aCO fe squarofrce p|a ^ pe£} (Q;ci,m) 

N(a)<Q k 



For p G T, k (Q; d,m), Theorem 3.1 gives 



Wp = — + 0(m 5 /iV(p) 1/2 ). 



Therefore 



i '«^.E, j (^W+<'(" 1 ^w" 1 )) 

\T} k {Q-d,m)\+O k {m b Q l 



peSi(Q;d,m) 

= I^J \v.hn-ri m\\ -i- n, (V^n 1 / 2 ! 

|SL 2 (Z/mZ)|' 

The assumption d G Xfc(G ! fc) mod m is needed to guarantees that 3>fc, m 1. The proposition 

follows by combining our lower bound of L(Q) and (1.1) with (5.1). □ 

5.2. Galois image modulo an integer. The following proposition shows that for a "random" 
elliptic curve E over k, pE,m has large image. 

Proposition 5.6. For a positive integer m, 

\B km (x)\ logx 



\B k {x)\ <<fe >HI,m x [k-.Q]/2- 

Proof. Let C\, . . . , C n be the conjugacy classes of GL2(Z/mZ) with determinant 1. By Lemma A. 9, 
we have B k ^ m (x) C {Jl^Yc^x) . Proposition 5.5 gives 

"l^T ^ g <*.H g ( | SL 2 (Z/mZ)| Q1/ ;^)l+0,(-^ • 

Using |Si(x[ fc:( Q]/ 2 ; l,m)| > fc , m x[ fe:Q ]/ 2 / log x, we deduce that 

^ fc ' m(a:)l «... V(x[ fc: «/ 2 /i oe xr 1 « logx □ 

\B k (x)\ ^ k '\-l> m 2-^y 1 g ' ^ m x [fe:Q]/2- u 

5.3. Galois image modulo primes. Let h be the absolute logarithmic height on P X (Q). For an 
elliptic curve E, let j(E) be its j-invariant. The following theorem bounds the number of €s that 
we need to consider (in particular, it gives an effective version of a result of Serre [Ser72]). 

Theorem 5.7 (Masser-Wiistholz [MW93]). Let E be an elliptic curve defined over a number field 
k, and assume that E does not have complex multiplication. There are positive absolute constants 
c and 7 such that if £ > c(max{[£; : Q], h(j(E))}) J , then p E ,l{G k ) 5 SL 2 (Z/£Z). 

Lemma 5.8. If (a,b) G B k {x), then h(j(E(a,b))) ^juui logx. 
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Proof. Let be the set of archimedean places of k. For each v G let | -|„ be an absolute 
value on the completion k v of k at v. On n^eE 00 ^> we nave a norm ||(a„, 6^)^ || i = sup„ gS °o \a v \ v + 



i2 ~ rr u2 



sup ugS oo jft^lt,. Using the natural isomorphism R ®z — Hues 00 we ma y view || - 1| as a norm 
on R®z Cfc- Recall that j(E(a,b)) = — 1728(4a) 3 /A aj fc. Since a and b are integral, we have 

h(j(E(a, &))) = /i([-1728(4a) 3 : A 0)6 ]) < fe V voo log(max{1728 • 4 3 |a| 3 , \A a , b \ v }) 

and thus h(j(E(a,b))) <Cfc log || (a, The norms ||-|| and are equivalent, so 

h(j(E(a,b))) <£ k log 11(0,6)1! <fc,||-| lo gllM)ll <logx. □ 

Lemma 5.9. There is a constant c k > (depending only on k) and an absolute constant 7 > 
such that 

{(a,b) G B k (x) : p E (a,b),t{Gk) 2 SL 2 (Z/£Z) for some prime £ > 5} = (J B k/ (x). 

5<^<c fc (loga;)T 

Proof. For an elliptic curve with complex multiplication, we have pEi{Gk) 2 SL2(Z/-£Z) for 
every prime £ > 5. The lemma follows by combining Theorem 5.7 and Lemma 5.8. □ 

Lemma 5.10. Assume that 5 < £ < c^(logx) 7 , where c k and 7 are the constants from Lemma 5.9. 
Then 

\B k ^x)[ (logx) 7 ^ 1 

\B k (x)\ m x [k-mn ' 

Proof. We may assume that £ satisfies fcflQ(^) = Q (this excludes only a finite number of £, which 
can be handled with Proposition 5.6). Define the set SJ(x) := {p G £fc(x) : N(p) is prime}. By 
the pigeonhole principle, there is an element d G (Z/^Z) X = Xk{Gk) mod £ such that 

\Xl(x^d,£)\ > ^|4(* M/2 )I + O k (l) » k ^xW/log*. 

Let C\, . . . ,C n be the conjugacy classes of GL2(Z/£Z) with det(Cj) = d. Combining Lemma A. 8 
and Proposition 5.5, we have 

The bounds n < £ 3 , 1 < \Ci\, and £ < Cfc(logx) 7 imply 

\ B kA x )\ „ e A iog^ „ (log x) 77+1 



|-B fc (x)| fc ' INI x[ fe: «/ 2 " xt fc: «2]/ 2 
5.4. Proof of Proposition 5.2. Using Lemmas 5.9 and 5.10, we obtain the following bounds: 
\U^B k/ {x)\ \B Kl {x)\ ^ (logx) 7 ^ 1 (logx) 87+1 

|5 fc (x)| " ^ |B fc (x)| fc ' IMI ^ x^l/2 fc x[ fc: «/ 2 ' 

By Proposition 5.6 (with m = 4 and 9), we have 

\B kA (x) U -B fci9 (x)| logx 



|5 fc (x)| <fc>IMI x [ fc:( Q]/ 2 ' 
The proposition follows immediately with (3 = 87 + 1. 



6. Discriminants 



Proposition 6.1. Fix a number field k 7^ Q, an integer r > 2, and assume that k contains fj, r . 
Then 

\{(a,b) £ B k (x) : ^A^G_fc^}| logx 
\B k (x)\ <<fc ' IMI ' r y/i- 

Remark 6.2. From Proposition 6.1, we find that conditions (c) and (d) of Proposition 2.1 hold for 
"most" elliptic curves over a fixed number field k 7^ Q. 

For the rest of this section, we shall fix k and r as in Proposition 6.1. Let d = [k : Q]. Let S be 
the finite set of rational primes which satisfies the following conditions with minimal value n^es^' 

• 5 contains the primes dividing 6r, 

• 5 contains the primes that are ramified in k, 

• Os is a principal ideal domain, where Os is the ring of S"-integers of k and S' = {p £ : 
p|p, for some p £ S}. 

Note that the above choice of S depends only on k and r. 

Lemma 6.3. Fix a prime p ^ S, an element A G k x , and let tyi . . . ,^3 n be the prime ideals of 
®k(\fK) over P- If v^A G k cyc , then 

e(?Pi/p) = --- = e(?Pn/p), 
where e(^i/p) is the ramification index oftyi over p. 

Proof. Since \/A G /c cyc = Q cyc ■ k, one can show that there is a field L C Q cyc such that k(</A) = 
L ■ k. Since p is unramified in A:, we find that effii/p) = C\Ol/p)- The value e(^3j C\Ol/p) is 
independent of i, since L is a Galois extension of Q. □ 

Lemma 6.4. Let B C 0^ 6e a set 0/ representatives for the cosets of O^ /(O^Y ■ Then for any 
A G O k with vA G A; cyc , there are m G Z, a G O5, and [3 £ B such that A = ma r (3. 

Proof. Fix A G Ofc with \/A G £; cyc . We first show that A can be written in the form ma r (3, for 
some m £ Z, a £ Os, and (3 £ 0$. We may assume that A is non-zero. Since Os is a principal 
ideal domain, there is an element a £ Os such that < ord p (A/a r ) < r for all p 5". 

Take any prime p ^ S and let pi, . . . ,p g be the prime ideals of Os lying over p. Suppose that 
some pi divides A/a r in Os- Since < ord p (A/a r ) < r, we deduce that the extension k({/A)/k is 
ramified at pi. By Lemma 6.3, we find that k{-\fK)/k is ramified at all the primes pi, . . . ,p g , and 
hence pOs = pi ■ ■ -p g divides A/a r in Os- Dividing by p and repeating the above process, we find 
that there is an integer m > 1 such that (3 := A/(ma r ) is an element of 0$ . We may assume that 
(3 is in B after multiplying a by an appropriate element of Og . □ 

For each (3 £ 0$ , define the sets 

Wp := {(a, b) £0\: A a ^ b = ma r f3, for some m £ Z, a G Os} 
and Wp{x) := Wjg fl B k {x). For a set 5 as in Lemma 6.4, we have 

{(a, b) £ B k (x) : ^A^ G A; cyc } C |J Wp(x). 

The set B is finite (since the abelian group Og is finitely generated), so 
(6.1) \{(a,b) £ B k {x) : ^A^G fc cyc }| « fc , r max \Wp{x)\. 

Thus to prove Proposition 6.1, it suffices to find bounds for the functions |iyg(x)|. 
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Lemma 6.5. Let p \ 6 be a prime with p = 1 mod r. For any 7 S , 

I {(a, b) G F 2 p : A a , fe = 7 c r , for some c G F p }\ = l -p 2 + O r (p 3/2 )- 

Proof. Fix 7 G F*. The equation A ai b = jc r defines a geometrically irreducible variety X in 
A|. = Spec(F p [a, 6, c]). Using the Weil conjectures, we find that 

(6.2) \X(F p )\=p 2 + O r (pV 2 ) 

(that the implicit constant in (6.2) depends only on r can be deduced from [Bom78]). 

For fixed (a, b) G F 2 , if A aj j, — 7c r has a solution c £ F* , then it has exactly r such solutions (this 
uses the assumption p = 1 mod r). Most solutions have since |{(a, 6) G F 2 : A aj b = 0}| <p. 

The lemma is now immediate. □ 

Lemma 6.6. Take any (5 G Og . Let p G" S be a prime that splits completely in k, and let Wp tP be 
the image of Wp in 0\jpO\. Then 



<(^ + o r AP~ 1/2 ))\o 2 k /p0 2 



\w P , P \ 

Proof. Let pi, . . . , p^ G be the prime ideals lying over p. By the Chinese remainder theorem, we 
have a natural identification Ok/pOk = Ilf=i^Pi- Then 

d 

W P,P ^ U II {(°' ^ £ F P, : Aa ' b = ^ ' C 9 m ° d Pi): for SOme a G F pJ' 
m£R i=l 

where the union is over a set of coset representatives R <ZF p of F* /(F*) r . We have p = 1 mod r, 
since p splits completely in k and by assumption jjL r C fc. By Lemma 6.5, 

< (p 2 A + a(p 3/2 )) d = j^/r^ 1 + O r4 (p 2d - 1/2 ). □ 
Lemma 6.7. For (5 G 0|, 1^(^)1 <fc,|.], r \B k {x)\{\agx)/y/x. 

Proof. Let I be the set of primes p G" S that split completely in k. By Lemma 6.6, for each prime 
p G I, we have |W^(x) modpO^| < (1 - w p )|^/pO^|, where u p = 1 - l/r d_1 + O r4 (p~ 1/2 ). For 
p I , set w p = 0. 

We may now apply the large sieve. By Theorem 4.1 (with K = Q, A = O 2 ., Q = \/^> an d our 
chosen norm |-| on M% A), we have |W^(x)| <tCfcj.ii x 2d / L{- S fx) , where 

^■■= e 

JCI finite pG J P 

Using r > 2 and d > 2 (since k 7^ Q), we have the bound 

> E II (1 + o r Ap- 1/2 )) > E ( 1 + Om(^ 1/2 )) • 

JC7 finite pS J pG/ 

The set / has positive density in the primes, so L(y/x) ~^> T ,k ^fx/\ogx. The lemma follows by using 
this bound for L(yfx) and (1.1) with our upper bound for |W^(x)|. □ 

Proof of Proposition 6.1. Apply Lemma 6.7 to the bound (6.1). □ 
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7. Elliptic curves with maximal Galois action 
7.1. Proof of Theorem 1.2. Define the sets 

Yi{x) = B kA {x) U Bfc, 9 (» U \\B k/ (x), 
Y 2 {x) = {(a,b) G B fc (x) : G ^ CyC }, 



y 3 (ic) = {(a, 6) G 5 fc (x) :/i 3 a and G fc cyc }. 

By Proposition 2.1, we have {(a, 6) G B k (x) : PE( a ,b)(G k ) H k } S ^lO^) U ^0*0 U ^jOe)) an d thus 

|{(a,6) G fl fc (x) : p E (a,b)(G k ) + H k }\ < ^(x)] + \Y 2 (x)\ + \Y 3 (x)\. 

By Proposition 5.2, we have |li(x)|/|i?/ c (x)| ■Cfciui (logx)^/x[ fe: ^/ 2 , where /3 > 1 is an absolute 
constant. By Proposition 6.1, we have 

|*2 (a) | „ logx 1*3(^)1 „ logx 

Combining everything together gives: 

\{(a,b) G J5 fc (x) : p E (a,b){G k ) / ((logx)' 3 logon logx 



\B k {x)\ << ^l maX l^W'7i/ << 
where the last bound uses k 7^ Q. 

7.2. Proof of Theorem 1.5. The theorem is easily deduced by combining the criterion of Lemma 2.4 
with Proposition 5.2 and Proposition 5.6 (with m = 72). 

Appendix A. Group theory for SL 2 

In this appendix, we collect several basic facts about the groups SL2(Z/mZ). We will need to 
pay special attention to the primes 2 and 3. 

A.l. Abelianizations. 

Lemma A.l. Let m be a positive integer, and define b := gcd(m, 12). Reduction modulo b induces 
an isomorphism SL2(Z/mZ) ab — ► SL2(Z/6Z) ab . The group SL2(Z/mZ) ab is cyclic of order b. 

Proof. It is well-known that the group PSL2(Z) := SL2(Z)/{±/} has a presentation (A, B : A 2 = 
1,B 3 = 1), thus PSL2(Z) ab is a cyclic group of order 6. Under the quotient map, SL 2 (Z)' surjects 
on to PSL 2 (Z)', so SL 2 (Z) ab has order 6 or 12. 

For each positive integer m, reduction modulo m gives a surjective homomorphism SL2(Z) -» 
SL2(Z/mZ) (see [Shi94, Lemma 1.38]). We leave it to the reader to verify that the groups 
SL 2 (Z/2Z) ab , SL 2 (Z/3Z) ab and SL 2 (Z/4Z) ab are cyclic of order 2, 3 and 4 respectively. We de- 
duce that SL2(Z) ab is cyclic of order 12 and that reduction modulo 12 induces an isomorphism 
SL2(Z) ab — ► SL2(Z/12Z) ab . The lemma is easily deduced from this isomorphism. □ 

A. 2. Reductions. 

Lemma A. 2. Let £ be a prime, n > 1 an integer, and H a subgroup of < Sh 2 (7L j £ n 7ll) . 

(i) If£>5 and the image of H modulo £ is SL 2 (Z/«), then H = SL 2 {Z/£ n Z). 

(ii) Ifn > 2 and the image of H modulo £ 2 is SL 2 (Z/£ 2 Z), then H = SL 2 (Z/£ n Z). 
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Proof. Part (i) is due to Serre, see [Ser98, IV-23 Lemma 3]. We now prove (ii). By induction, it 
suffices to show that for each r > 2, no proper subgroup of SL2(Z/£ T ' +1 Z) reduces modulo £ r to the 
full group SL 2 (Z/rZ). Let G be any subgroup of SL 2 (Z/f +1 Z) such that G mod t r = SL 2 (Z/rZ). 
It suffices to show that G contains the abelian group s := {A G SL 2 (Z,/£ r+1 7,) : A = I mod £ r }. 

The group s has a natural structure as a SL 2 (Z/£Z)-module; i.e., conjugate by any lift to 
SL 2 (Z/T +1 Z). As an SL 2 (Z/£Z)-module, s is generated by 

I + f(° l) and I + 

Since G mod £ = SL2(Z/£Z), we find that Gfls is a SL2(Z/^Z)-sub module of s. Take any B G 
{(00)1(10)}' We snau now show that I + £ r B G G, which will complete the proof of (ii). By 
assumption, there exists a g G G such that g = I + £ r ~ 1 B mod £ r . Taking ^-th powers, and using 
r > 2 and B 2 = 0, we find that I + £ r B = g e G G. □ 

Remark A. 3. Lemma A.2(i) is not true for £ = 2 and 3 (see [Ser98, IV-28 Exercises 2 and 3]). 

A. 3. Goursat's lemma. For a finite group G, let J{G) be the set of non-abelian simple groups, 
up to isomorphism, which occur in some/any composition series of G. 

Lemma A. 4 (Goursat's lemma). Let G\, . . . , G n be finite groups, and assume that for each i ^ j, 
J{Gi) n J(Gj) = and gcd(|Gf b |, \Gf |) = 1. Let H be a subgroup of Gi X • • • x G n such that 
pr^H) = Gi for every projection pr^: G\ X ■ ■ ■ X G n — > Gj. T/ien H = G\ x ■ ■ ■ x G n . 

Proof. By induction, we may reduce to the case n = 2. Define iVi = pr 1 (-ff n (Gi x {1})) and 
A^2 = pr 2 (i? n ({1} x G2)) which are normal subgroups of G\ and G2 respectively. The image of H 
in G\/N\ x G2/-/V2 is the graph of an isomorphism 

(A.l) Gx/Nx * G 2 /N 2 ; 

this fact is usually called Goursat's lemma (see [Rib76, Lemma 5.2.1]). We deduce that J{G\/N\) C 
J{G\) Pi J{G 2 ) = 0, thus the group G\/N\ is solvable. The groups G\ and G2 have no common 
abelian quotients besides 1 (this follows from the assumption gcd(|Gf |, |G| b |) = 1), so from (A.l) 
and the solvability, we deduce that Gi = N\ and G 2 = N 2 . From the definition of the Ni, we find 
that H contains {1} x G2 and G\ x {1}, hence H = G\X G 2 . □ 

Lemma A.5 ([Lan02, XIII Theorem 8.4]). For £ > 5, PSL 2 (Z/«) := SL 2 (Z/«)/{±/} is a 
non-abelian simple group of order (£ 3 — £)/2. The groups SL2(Z/2Z) and SL2(Z/3Z) are solvable. 

Lemma A. 6. Let m and n be relatively prime positive integers and let H be a subgroup of 
SL 2 (Z/mnZ). Then H = Sh 2 (7j/mn'Z) if and only if H surjects onto §~L 2 ('L/rnL) and SL2(Z/nZ) 
by reduction modulo m and n, respectively. 

Proof. Using Lemma A.5 and the solvability of ^-groups, we deduce that for any positive integer 
d, i y(SL2(Z/dZ)) = {PSL2(Z/^Z) : £\d, £ > 5}. Since m and n are relatively prime, we have 
J(SL 2 (Z/mZ)) n J(SL 2 (Z/nZ)) = 0. By Lemma A.l, 

gcd(|SL 2 (Z/mZ) ab |,|SL 2 (Z/nZ) ab |) = gcd(m, n, 12) = 1. 

The lemma is now a direct consequence of Lemma A. 4. □ 

Lemma A. 7. Let H be a closed subgroup o/SL 2 (Z). Then H = SL2(Z) if and only if H mod 4 = 
SL 2 (Z/4Z), H mod 9 = SL 2 (Z/9Z), and H mod £ = SL 2 (Z/«) for all£>5. 

Proof. We have H = SL 2 (Z) if and only if H mod m = Sh 2 (Z/mZ) holds for all positive integers 
m. By Lemmas A. 2 and A. 6, this equivalent to having H mod m = SL2(Z/mZ) whenever m is 4, 
9, or a prime > 5. □ 
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A. 4. Conjugacy classes with fixed determinant. 



Lemma A. 8. Let £ be a prime and H a subgroup q/GI^F^). Fix an element d G Wf . If HOC ^ 
for every conjugacy class C o/GL^F^) with det(C) = {d}, then H D SL2(F^). 

Proof. First suppose that d = b 2 for some b £¥f . The group H then contains an element conjugate 
in GL2(F^) to 6 • (J I )• In particular, \H\ = mod I. By [Ser72, Proposition 15] (which needs the 
condition \H\ = mod £), we deduce that either H is contained in a Borel subgroup of GL^F^) 
or H contains SL^F^). If H was contained in a Borel subgroup, then the main hypothesis of the 
lemma would imply that every semisimple matrix in GL2(F^) of determinant d is diagonalizable 
over F^; which is false. Therefore, H D SL^F^). 

Now suppose that d is not a square in F^ . Without loss of generality, we may assume that H 
contains the scalar matrices in GL^F^). Since d is not a square, we have det(ff) = ¥f . 

We shall now show that H = GL^F^). Let be the set of elements of H with determinant d. 
The main hypothesis of the lemma implies that 

(A.2) {A G GL 2 (F,) : det(A) = d} = (J gH d g-\ 

g&GL 2 (¥ e )/H 

By counting both sides, we find that the expression (A.2) must be a disjoint union. Therefore 
(A.3) (J {g G GL 2 (F,) : ghg' 1 G H} C H. 

h£H d 

Using (A.2) and (A.3), we find that H contains both split and non-split Cartan subgroups of 
GL2(F^) (see [Ser72, §2.1] for definitions). Using Propositions 17 and 14 of [Ser72], we deduce that 
H = GL 2 (¥ £ ). □ 

Lemma A. 9. Let m be a positive integer and let H be a subgroup o/GL2(Z/mZ). If H DC ^ 
for every conjugacy class C o/GL2(Z/mZ) with determinant 1, then H D SL2(Z/mZ). 

Proof. By replacing H with H n SL2(Z/mZ), we may assume that H is a subgroup of SL2(Z/?nZ). 
By Lemma A. 6, it suffices to consider the case where m is a prime power. By Lemma A.2, we 
may further assume that m is 4, 9, or a prime. The case where m is prime, is a consequence of 
Lemma A. 8. 

We may thus assume that m = £ 2 , where £ = 2 or 3. There is an exact sequence 

1 -» s -» SL 2 (Z/mZ) m -^ £ SL 2 {Z/£Z) 1. 

Since s is abelian, it has a natural SL2(Z/£Z)-action; i.e., lift to an element of SL2(Z/?nZ) and 
act via conjugate on 5. By the prime case of the lemma, we find that the image of H modulo £ is 
SL2(Z/^Z). Therefore H Hs is a normal subgroup of SL2(Z/mZ). 

If £ = 3, then H n s contains an element conjugate in GL2(Z/9Z) to A := (| f ). The conjugacy 
classes of j4 in SL2(Z/9Z) and GL2(Z/9Z) are equal and have cardinality 12. Since H n s is a 
normal subgroup of SL2(Z/9Z), we deduce that H Ds contains at least 12 elements. Since |s| = 27, 
we conclude that H Ds = 5 and hence H = SL2(Z/9Z). 

If £ = 2, then H n s contains 5 := ( g § ) which is in the center of GL2(Z/4Z). Also H n s must 
contain at least one element not in {I,B}. Since |s| = 8, we have 

[SL 2 (Z/4Z) : H] = [s : H n s] G {1, 2}. 

Suppose that [SL2(Z/4Z) : iJ] = 2. Then if is a normal subgroup of SL2(Z/4Z) with quotient 
cyclic of order 2. However, by Lemma A.l there is only one index 2 subgroup of SL2(Z/4Z), and 
when reduced modulo 2, it does not have image SL2(Z/2Z). Therefore [SL2(Z/4Z) : H] = 1. □ 
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